Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
File:                     nryww05Pd_InjbFcWeHtrH5VdW4.cer (raw, json)
Hash identifier:          VqUidddMfrdWJbzQPd9Splc+UmYUeKFYfRIG9QS6uJY=
Subject key identifier:   9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E446
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 Mar 2024 07:37:06 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 150736
                          IP: 103.77.216.0/23
                          IP: 2001:df1:e2c0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 05:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123974 (0x1e446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 13 07:37:06 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:5e:00:29:0e:9f:40:43:87:60:6c:93:31:
                    b0:1a:c2:2e:e0:9f:46:ad:18:6a:15:66:41:fd:f6:
                    d6:5c:50:84:0a:8b:cb:b2:1f:09:5c:79:ea:fa:7b:
                    90:86:69:f0:6b:f8:6b:1f:59:d8:02:82:f1:94:7d:
                    bd:8e:68:aa:72:e6:ae:ff:8a:e6:13:92:b1:19:1d:
                    40:0e:20:a3:31:33:e1:86:62:2e:76:52:32:55:4a:
                    2d:ca:b0:8f:2c:de:52:a0:83:38:92:fa:2a:91:88:
                    43:4d:a9:7c:bf:f7:43:40:75:72:3c:d6:fe:70:9c:
                    57:04:eb:bf:14:aa:2a:9c:0d:54:89:58:01:5d:3c:
                    fd:1b:ad:b5:58:85:84:89:9c:e8:e0:61:be:aa:5d:
                    7d:4e:e0:8a:17:cf:92:fd:70:bb:79:c6:36:cd:77:
                    af:3d:d5:b2:7c:26:2e:df:75:a2:f5:22:13:f6:b6:
                    60:93:1e:fe:cb:e1:26:ed:c6:2e:c3:3f:b5:63:f4:
                    3a:38:f5:38:e3:94:29:db:7f:f9:0e:d9:03:b7:66:
                    4b:80:1f:c7:71:21:ff:91:58:4f:3b:ea:88:ed:e2:
                    bd:0d:9b:a9:bc:df:6b:64:c8:0e:2c:a7:65:11:ee:
                    84:5c:a2:5a:b8:ec:d1:8c:00:d6:2d:91:56:be:ca:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150736

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.216.0/23
                IPv6:
                  2001:df1:e2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:6a:38:bc:43:2b:8e:56:29:c3:d5:77:af:3e:be:ca:53:cf:
         65:54:8f:8d:3f:d7:ed:e4:41:b4:97:bd:03:cb:06:d9:df:d2:
         a4:32:f2:fd:d3:7e:04:e2:d1:44:ff:1b:ca:14:2d:a2:fb:77:
         4a:0f:93:d7:c9:f3:22:71:5d:8d:76:20:3a:e5:91:11:a5:a1:
         c8:ec:13:71:91:6a:88:67:60:ec:86:3c:2b:3a:86:05:d1:e6:
         ce:6a:df:16:30:8d:56:a5:f5:78:08:ba:9d:06:4c:7e:c7:7b:
         f9:7e:4b:bc:30:c6:55:3a:d2:d1:9f:8e:7c:c9:af:01:90:cd:
         d9:79:b7:ce:11:11:ff:17:21:e3:74:ae:49:74:2d:30:33:0b:
         a4:d4:2b:06:ce:f4:7e:ae:9b:64:0d:f0:2b:13:71:19:86:9a:
         31:40:e8:50:a6:3c:54:16:c2:34:fb:f8:4a:5c:22:f3:79:e3:
         6a:85:3a:2b:36:cb:19:45:72:7b:d7:24:79:59:76:1a:07:a0:
         6a:86:cc:e8:dd:00:15:35:cb:f0:39:7e:c5:48:bf:e0:13:e7:
         47:11:c1:b1:56:01:55:e9:e0:4e:cf:65:47:56:d1:19:76:fa:
         6b:91:97:25:9f:c9:c6:59:7a:9c:00:a6:0a:4f:5c:fa:56:6b:
         30:0e:ba:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 05:58:38 2024 by rpki-client on console-ams.rpki-client.org